This Privacy Policy describes how Broadhead Software (“Broadhead Software,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Choirside mobile applications for iOS and Android and the Choirside website (together, the “Service”). Choirside helps choir directors share synchronized choral practice tracks with choir members.
By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
1. Information We Collect
Information you provide to us
- Account information. When you create an account, we collect your name, your email address, and your date of birth. Choirside has no passwords: you sign in with a one-time code or sign-in link sent to your email address, or with a passkey stored on your device. If you sign in with Apple, we receive the name and email address (or Apple’s private relay email address) associated with that account. We do not receive your Apple password.
- Profile and choir information. Information you add to your profile and information about the choirs or ensembles you create or join, such as choir name, your voice part, and your role (for example, director or member).
- User content. Content that you or your choir director upload or create in the Service, including audio practice tracks, recordings, sheet music, song titles, playlists, annotations, and announcements or notes shared with your choir. The Service does not include private messaging between individual users.
- Payment information. If you purchase a subscription, the transaction is processed by our payment provider, Stripe. We receive the billing contact details, subscription status, and the last four digits and card type needed to show you what you are paying with, but we never receive or store your full payment card number. Only the director or organization buying a subscription pays; choir members are never charged.
- Communications. Information you provide when you contact us for support or feedback.
Information collected automatically
- Usage data. Information about how you interact with the Service, such as features used, tracks played, session length, and general usage patterns.
- Device and log data. Device type and model, operating system version, app version, language, IP address, unique device or installation identifiers, and diagnostic and performance data.
Website measurement
We sometimes test different wording on the pages of choirside.com to see which is clearer. To do that, this website stores two values in your browser’s local storage: a random identifier that is not linked to any account or to you, and which version of the page you were shown. When you open a page or click a link that is part of a test, the website sends those two values, along with your browser’s user-agent string, to our own servers.
That is the whole of it. There is no cookie, no advertising identifier, no cross-site tracking, and nothing is shared with anyone else. The identifier is random, tells us nothing about who you are, and is used only to avoid counting the same browser twice. You can erase it at any time by clearing site data for choirside.com in your browser, and the website works normally with JavaScript turned off, in which case nothing is stored or sent at all.
We do not collect precise location data, contacts, photos (other than files you deliberately upload), health data, or advertising identifiers for tracking purposes, and we do not sell your personal information. Choirside uses no third-party analytics, advertising, or crash-reporting services: the usage and diagnostic data described above is processed by us, on our own servers.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service, including syncing practice tracks and content across your devices and within your choir;
- Create and manage your account and authenticate you when you sign in;
- Process purchases and manage subscriptions;
- Enable choir directors to share content with the members of their choir;
- Send service-related communications, such as account confirmations, security notices, and important updates about the Service;
- Understand how the Service is used so we can fix bugs, improve performance, and develop new features;
- Detect, prevent, and address technical issues, abuse, and fraud;
- Review and act on content that is reported to us, and enforce our Terms of Service; and
- Comply with legal obligations.
We do not use your personal information for third-party advertising, and we do not sell or rent your personal information to anyone.
3. How We Share Your Information
We share personal information only in the following circumstances:
| Who | What and why |
|---|---|
| Within your choir | Your name and voice part are visible to your choir’s director and to other members of the same choir. Practice tracks and other material your director shares are visible to the choir. Recordings you upload are private by default, which means they are visible to you, to your choir’s director and section leaders, and to the owner of the organization the choir belongs to — not to the choir at large. They are shared with the whole choir only if you or your director choose to do so. This sharing is the core purpose of the Service. |
| Service providers | We use Amazon Web Services (AWS) to host the Service and store data, including account information and uploaded content, on servers located in the United States, and an email delivery provider to send sign-in codes and service messages. These providers process data only on our behalf and under our instructions. |
| Payments | Stripe processes subscription payments made on the web under its own privacy policy, and receives the billing details you enter at checkout. |
| Legal requirements | We may disclose information if required to do so by law, or in a good-faith belief that disclosure is necessary to comply with a legal obligation, protect our rights or the safety of users, or investigate fraud or abuse. |
| Business transfers | If Broadhead Software is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy. |
We require any third party with whom we share personal information to provide the same or equal protection of your data as described in this policy.
4. Content Moderation and Reporting
The Service allows directors and members to upload and share content. To keep the Service safe, we operate the following measures:
- Reporting. User content and member accounts can be reported from within the app, directly from the content itself — a recording from the recording, a member from your choir’s roster. Reports come to us, not to your director, so that a report about a director still reaches someone who can act on it.
- Review. We review reported content promptly and aim to act within 24 hours by removing content that violates our Terms of Service and, where appropriate, suspending or removing the account responsible.
- Blocking. You can block another user, which hides that person’s recordings and announcements from you throughout the Service. Blocking takes effect immediately, is not disclosed to the person blocked, and does not change anyone’s membership of a choir.
- Copyright. If you believe content on the Service infringes your copyright, you can submit a notice to our designated agent. Our copyright policy, including our takedown and counter-notice process and our policy on repeat infringers, is available on our website.
When you submit a report, we collect the content of the report and information about the content and account you are reporting, and we retain that record so we can act on it and address repeat problems. We may share limited information from a report with the account holder concerned where necessary to resolve it.
5. Data Security
We take reasonable technical and organizational measures to protect your information, including encryption of data in transit (TLS/HTTPS), encryption of stored data on AWS infrastructure, access controls that limit who can access personal data, and secure authentication practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information using industry-standard safeguards.
6. Data Retention and Deletion
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Account information is kept until you delete your account.
- User content (tracks, playlists, and related material) is kept until it is deleted by you or the choir director who manages it, or until the associated account or choir is deleted.
- Usage, diagnostic, and log data is retained for a limited period for analytics and troubleshooting and is then deleted or aggregated so it no longer identifies you.
- Transaction records may be retained longer where required for tax, accounting, or legal purposes.
- Moderation and copyright records (reports, takedown notices, and the action we took) are retained so that we can enforce our policies consistently and identify repeat problems.
- Website measurement events are kept while the wording test they belong to is running and are deleted once we have decided which version to keep.
Deleting your account. You can delete your account at any time from within the app (Settings → Account → Delete Account), on the web at choirside.com/delete-account, or by emailing us at privacy@broadheadsoftware.com. Deleting your account removes your data rather than merely deactivating or suspending it.
When you ask us to delete your account, we sign you out everywhere and schedule the account for deletion after a 30-day grace window, so that a request made by mistake can be undone. Signing back in during those 30 days cancels the request. At the end of the window we delete or de-identify your personal information, except for limited records we are legally required to keep. Content you uploaded to a choir as its director may be deleted along with your account; content you shared into a choir managed by someone else may remain available to that choir where the director retains it.
7. Your Choices and Rights
- Access and correction. You can view and update your account information in the app at any time, or contact us to request a copy of the personal information we hold about you.
- Deletion. You can delete your account and associated data as described above.
- Withdrawing consent. Where we rely on your consent to process data, you may withdraw it at any time by adjusting your settings in the app or contacting us. Withdrawing consent does not affect processing that occurred before withdrawal.
- Email. Service messages such as sign-in codes are required for the Service to work and cannot be turned off while your account is open. Choirside does not send push notifications.
- Website measurement. Clearing site data for choirside.com in your browser erases the random identifier described in Section 1; browsing with JavaScript disabled prevents it being created in the first place.
Depending on where you live, you may have additional legal rights over your personal information — for example, under the EU/UK General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA), including rights to access, correct, delete, or port your data, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA. To exercise any of these rights, contact us using the details below; we will respond within the timeframe required by applicable law.
8. Children’s Privacy
The Service is not directed to children under 13, and use of the Service is limited to individuals who are 13 years of age or older. We ask for date of birth when you register and do not permit accounts for users under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@broadheadsoftware.com and we will promptly delete it.
Many choirs include members who are teenagers. If you are under 18, please use the Service with the involvement of a parent, guardian, or your choir’s director. Parents and guardians who have questions about a young member’s account, or who wish to have it removed, can contact us at the address above.
9. International Data Transfers
The Service is operated from the United States, and information we collect is stored and processed on AWS servers in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where required by law, we use appropriate safeguards for such transfers.
10. Third-Party Services
The Service may contain links to third-party websites, and offers Sign in with Apple as an alternative to signing in by email. Apple’s service is governed by its own privacy policy, and we encourage you to review it. This policy applies only to information collected by the Service.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email before the changes take effect, and we will update the “Last updated” date at the top of this page. Your continued use of the Service after changes take effect means you accept the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or how we handle your data, or wish to exercise any of your privacy rights, contact us:
Broadhead Software
Privacy contact: privacy@broadheadsoftware.com